Automatic commit of package [smeserver-letsencrypt-client] release [0.2.9-1].

Created by command:

/usr/bin/tito tag

.tito/packages/.readme

@@ -0,0 +1,3 @@
+the .tito/packages directory contains metadata files
+named after their packages. Each file has the latest tagged
+version and the project's relative directory.

.tito/packages/smeserver-letsencrypt-client

@@ -0,0 +1 @@
+0.2.9-1 ./

.tito/releasers.conf

@@ -0,0 +1 @@
+../../tito_libs/releasers.conf

.tito/tito.props

@@ -0,0 +1,6 @@
+[buildconfig]
+builder = tito.builder.Builder
+tagger = tito.tagger.VersionTagger
+changelog_do_not_remove_cherrypick = 0
+changelog_format = %s (%ae)
+lib_dir = ../tito_libs

root/etc/e-smith/templates/etc/dehydrated/config/10Uri

@@ -8,7 +8,7 @@ elsif ($uri =~ m/^(test(ing)?)|staging$/){
   $OUT .= "CA=https://acme-staging.api.letsencrypt.org/directory\n";
 }
 elsif ($uri =~ m/^prod/){
-  $OUT .= "CA=https://acme-v01.api.letsencrypt.org/directory\n";
+  $OUT .= "CA=https://acme-v02.api.letsencrypt.org/directory\n";
 }
 
 }

root/etc/e-smith/templates/etc/dehydrated/config/45Algo

@@ -0,0 +1 @@
+KEY_ALGO=rsa

root/etc/e-smith/templates/etc/dehydrated/config/70PreferredRoot

@@ -0,0 +1 @@
+PREFERRED_CHAIN="issuer= /C=US/O=Internet Security Research Group/CN=ISRG Root X1"

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/Ejabberd/80Letsencrypt

@@ -1,5 +1,5 @@
 {
-  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled' && ((${'httpd-e-smith'}{'TCPPort'} || '80') eq $port)){
+  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled'){
     $OUT .=<<"_EOF";
     Alias /.well-known/acme-challenge/ /var/lib/dehydrated/challenges/
     <Location /.well-known/acme-challenge/>

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/LemonLDAPManager/80Letsencrypt

@@ -1,5 +1,5 @@
 {
-  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled' && ((${'httpd-e-smith'}{'TCPPort'} || '80') eq $port)){
+  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled'){
     $OUT .=<<"_EOF";
     Alias /.well-known/acme-challenge/ /var/lib/dehydrated/challenges/
     <Location /.well-known/acme-challenge/>

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/LemonLDAPPortal/80Letsencrypt

@@ -1,5 +1,5 @@
 {
-  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled' && ((${'httpd-e-smith'}{'TCPPort'} || '80') eq $port)){
+  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled'){
     $OUT .=<<"_EOF";
     Alias /.well-known/acme-challenge/ /var/lib/dehydrated/challenges/
     <Location /.well-known/acme-challenge/>

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/LemonLDAPSoap/80Letsencrypt

@@ -1,5 +1,5 @@
 {
-  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled' && ((${'httpd-e-smith'}{'TCPPort'} || '80') eq $port)){
+  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled'){
     $OUT .=<<"_EOF";
     Alias /.well-known/acme-challenge/ /var/lib/dehydrated/challenges/
     <Location /.well-known/acme-challenge/>

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/UserManagerVirtualHost/80Letsencrypt

@@ -1,5 +1,5 @@
 {
-  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled' && ((${'httpd-e-smith'}{'TCPPort'} || '80') eq $port)){
+  if (($domain->prop('Letsencrypt') || 'enabled') ne 'disabled'){
     $OUT .=<<"_EOF";
     Alias /.well-known/acme-challenge/ /var/lib/dehydrated/challenges/
     <Location /.well-known/acme-challenge/>

smeserver-letsencrypt-client.spec

@@ -1,11 +1,7 @@
-%define version 0.2.3
-%define release 1
-%define name smeserver-letsencrypt-client
-
 Summary: Let's Encrypt client for SME Server based on dehydrated
-Name: %{name}
-Version: %{version}
-Release: %{release}%{?dist}
+Name: smeserver-letsencrypt-client
+Version: 0.2.9
+Release: 1%{?dist}
 License: GPL
 Group: Applications/System
 Source: %{name}-%{version}.tar.gz
@@ -22,6 +18,30 @@ Automatically get certificates from letsencrypt
 Using https://github.com/lukas2511/dehydrated
 
 %changelog
+* Thu Sep 30 2021 Daniel Berteaud <daniel@firewall-services.com> 0.2.9-1
+- Use RSA instead of EC as it's not working on EL6 (daniel@firewall-
+  services.com)
+
+* Thu Sep 30 2021 Daniel Berteaud <daniel@firewall-services.com> 0.2.8-1
+- Fix chain selection on el6 (daniel@firewall-services.com)
+
+* Thu Sep 30 2021 Daniel Berteaud <daniel@firewall-services.com> 0.2.7-1
+- Specify ISRG X1 as preferred chain (daniel@firewall-services.com)
+
+* Fri Oct 23 2020 Daniel Berteaud <daniel@firewall-services.com> 0.2.6-1
+- Don't restrict ACME challenges to the clear text vhost (daniel@firewall-
+  services.com)
+- Cleanup spec file for tito (daniel@firewall-services.com)
+
+* Wed Jul 15 2020 Daniel Berteaud <daniel@firewall-services.com> 0.2.5-1
+- Bump version
+
+* Wed Jul 15 2020 Daniel Berteaud <daniel@firewall-services.com> 0.2.4-1
+- Build with tito
+- Switch to the v02 API
+* Thu May 4 2017 Daniel Berteaud <daniel@firewall-services.com> - 0.2.4-1.sme
+- Expand cron file in bootstarp-cnsole-save
+
 * Wed Mar 15 2017 Daniel Berteaud <daniel@firewall-services.com> - 0.2.3-1.sme
 - Set default Uri to prod